Olymp Loader: A new Malware-as-a-Service written in Assembly

Olymp Loader is a recently emerged Malware-as-a-Service offering advertised on underground forums since June 2025. Developed by a team called OLYMPO, it's written in assembly language and marketed as fully undetectable. The loader executes other malware on victim systems and provides built-in stealer modules for browsers, Telegram, and crypto wallets. It enables rapid feature updates and fast adoption by cybercriminals. The malware has evolved from an initial botnet concept to focus on loader and crypter functionalities. Distribution methods include disguising as legitimate software and using other malware like Amadey as initial access. Post-infection payloads primarily include credential stealers and remote access tools.

• StealC and Amadey: Breaking down infostealers and the cybercrime services that deliver themMalware2026-06-24
• 2CLoader: A New Malware Loader Delivering Vidar and RemusMalware2026-09-30
• Disposable Domains, Durable HostingMalware2026-09-23
• VectraRAT: An Undocumented Full-Stack MaaS Built From ScratchMalware2026-09-16
• Operation Endgame disrupts Amadey and StealcMalware2026-06-24